docs: align M1 live acceptance workflow

[Notyet1307]

Task

• Issue: [SAS-104] 实现 Agent 输出 JSON Schema 强校验 #10, [SAS-105] 记录 daemon run sandbox model skill tool provenance #11, [SAS-106] 将取消传播到 agent-compose 实际运行 #13, [SAS-107] 建立执行错误分类与安全重试策略 #14, and [SAS-108] 完成五个 Agent 的授权真实 Sandbox 验收 #61
• Writer: @Notyet1307
• Acceptance criteria: keep repository evidence separate from live acceptance; align M1 dependencies; record SAS-108 hard gates
• Evidence tier: offline / controlled-environment

Change

• Clarify that [SAS-103] 完成五个 Agent 的真实 Sandbox smoke #9 closure covers repository-reachable harness work, not live Sandbox acceptance.
• Align SAS-104/105/106/107 dependencies to SAS-102 and document their evidence boundaries.
• Add the SAS-108 preflight record and live acceptance gate to project status and roadmap.
• Add single-writer, authorization, evidence-tier, and independent-acceptance rules to contribution and PR materials.
• Correct agent-compose error classification and prohibit blind retries without authoritative idempotency or no-side-effect evidence.
• Add local-development warnings for .env export and make clean data deletion.

Why

The local planning graph and the GitHub task bodies previously treated SAS-103 live smoke as a prerequisite for repository-level work. The updated contract separates offline/controlled evidence from the future authorized live gate and fails closed when external provenance or attestation is absent.

Scope and non-goals

• Documentation, planning, and GitHub task-contract alignment only.
• Does not execute Provider, agent-compose, OctoBus, network, or Sandbox actions.
• Does not claim 100/100 live runs, 10/10 live lifecycle checks, 20-control attestation, or production readiness.
• Does not close [SAS-104] 实现 Agent 输出 JSON Schema 强校验 #10, [SAS-105] 记录 daemon run sandbox model skill tool provenance #11, [SAS-106] 将取消传播到 agent-compose 实际运行 #13, [SAS-107] 建立执行错误分类与安全重试策略 #14, or [SAS-108] 完成五个 Agent 的授权真实 Sandbox 验收 #61.

Verification

• SAS_VERIFY_AGENT_COMPOSE=0 SAS_EXECUTOR=mock make verify
• make smoke (not rerun; existing CI/Mock evidence remains explicitly labeled)
• make race for concurrency/store changes (not applicable; documentation-only)
• Added or updated fixtures/evals (not applicable)
• No secrets or customer data
• Security boundaries reviewed in the documented scope
• Documentation and rollback updated
• Evidence tier is labeled; CI or Mock output is not presented as live evidence
• Live authorization (not applicable; no live execution)
• Independent acceptance (pending reviewer)

Evidence

• Commit: d569b94 (cherry-picked from pushed ad74aab9cb2b5aab2397d069a492bcf339365d5b onto origin/main)
• git diff --check passed.
• Preflight remains BLOCKED: controls attestation, governed validator provenance, authoritative runtime provenance, listener/credential authorization, and retry idempotency signal are absent or unverified.
• No live credentials or customer data included.